OffConvert is currently pre-1.0. Security fixes are applied to the latest published release only.

Do not open a public issue for a suspected vulnerability. Use GitHub private vulnerability reporting and include the affected version, impact, reproduction steps, and any suggested mitigation.

Avoid attaching private source media. A minimal synthetic sample is preferred when a file is needed to reproduce the issue.